NetSight
IP …
critical9.8

CVE-2023-48901

A SQL injection vulnerability in tramyardg Autoexpress version 1.3.0, allows remote unauthenticated attackers to execute arbitrary SQL commands via the paramet…

Impact

A SQL injection vulnerability in tramyardg Autoexpress version 1.3.0, allows remote unauthenticated attackers to execute arbitrary SQL commands via the parameter "id" within the getPhotosByCarId function call in details.php.

Affected products

VendorProductAffected versions
TramyardgAutoexpress
Version 1.3.0

Weakness classification

CWE-89

References